activestorage/lib/active_storage.rb · v6.0.5 · Rails relative code / rails-deleted-2

Feb 15, 2022

Added image transformation validation via configurable allow-list. · 92f64fec

Zack authored Feb 15, 2022

ImageProcessingTransformer now offers a configurable allow-list for
transformation methods in addition to a configurable deny-list for arguments.

[CVE-2022-21831]

92f64fec

Added image transformation validation via configurable allow-list.

Zack authored Feb 15, 2022

ImageProcessingTransformer now offers a configurable allow-list for
transformation methods in addition to a configurable deny-list for arguments.

[CVE-2022-21831]